update to use plone.protect